Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File: Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier: qBzD6WM1HfDTjXDWdN4cwsSmeJAk5TUyGz0Gf2ODys0=
Subject key identifier: 7B:6D:60:30:A9:72:91:7B:B8:25:6F:73:1F:B7:10:B1:52:0B:01:54
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial: 019E1D59C3E322B6502A0B6EDD00C67E2D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number: 0714
Signing time: Tue 12 May 2026 18:01:22 +0000
Manifest this update: Tue 12 May 2026 18:01:22 +0000
Manifest next update: Wed 13 May 2026 18:01:22 +0000
Files and hashes: 1: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: JUjyyPTUDvvy5NStKBrPKL6/o8K2kavXQjhkspQLvlo=)
2: TkBggeEIG38cTqgeQZJyjYdfERw.roa (hash: TVtGwEq6QFTLzR+0I1131Dy7n+e87d5rFxxyq5eLPbY=)
3: WEVqV3-Rp-d0LXAX2D5pD9lVyK4.roa (hash: /YFcmAE3f+SI8C115sE0xgY4yWWtCJhMHzRULYVE/Ig=)
4: nGgWCHlP5Rfk7nEXR5r0SwPGVhg.roa (hash: ub89EExosLdu9SpuUWFdEh7qASm/VbEptc/K/f13V3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:c3:e3:22:b6:50:2a:0b:6e:dd:00:c6:7e:2d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Validity
Not Before: May 12 18:01:22 2026 GMT
Not After : May 13 18:01:22 2026 GMT
Subject: CN=7b6d6030a972917bb8256f731fb710b1520b0154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:12:b8:2b:76:e4:88:35:f7:c2:ab:25:43:12:
c6:26:8a:86:5e:bd:fc:e0:a8:4b:35:ce:a7:a3:60:
75:b9:0d:4e:9f:1a:65:c6:1b:ae:8e:90:59:a8:18:
a5:24:fd:cd:d6:b3:df:c8:bf:bb:e8:a9:b0:1f:8b:
06:97:cc:6a:df:cd:3b:6c:a5:42:e4:ae:ef:0c:14:
74:c2:d4:f3:60:94:b4:28:6b:4c:c6:1b:a6:9e:26:
ec:43:8b:61:24:97:d7:14:83:dd:64:7d:6a:b3:a4:
42:58:fa:34:27:71:ec:70:f6:59:d7:74:05:03:e0:
a9:de:4c:25:d2:26:49:b7:90:1d:b7:02:82:df:67:
e5:c8:ee:c1:75:bc:8d:6f:ab:94:3a:93:8e:9f:48:
3f:8f:75:a1:44:98:ad:11:36:0f:46:9f:d9:13:cb:
bc:2c:d0:de:3b:2c:76:5e:dd:e8:f0:58:84:3b:8c:
05:d1:93:98:d4:bc:de:f6:c0:09:2f:f5:69:3a:59:
99:32:0e:40:5c:18:97:f1:b0:b6:32:f7:bb:29:96:
c2:f6:6e:69:d8:e2:a3:e7:da:e5:3f:74:cf:a6:0a:
59:36:80:7c:23:78:40:94:cf:81:23:58:7c:08:d8:
1f:cb:55:c0:59:a1:b4:c2:de:dd:e7:f0:eb:dd:c3:
c4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6D:60:30:A9:72:91:7B:B8:25:6F:73:1F:B7:10:B1:52:0B:01:54
X509v3 Authority Key Identifier:
keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0b:86:e6:a9:63:9f:5e:df:d4:9d:95:fb:a6:32:89:da:74:
0e:7f:0b:3b:6b:33:d3:47:bd:04:58:8e:70:13:62:ab:90:8e:
9c:22:2b:64:20:de:79:6f:46:76:69:b0:e6:86:15:5d:ca:b5:
4b:c4:0c:e2:55:28:ce:1a:52:40:73:98:7e:5c:06:fc:af:e1:
de:94:35:0b:07:ba:f5:ba:f2:fa:5a:33:0f:23:36:2e:1a:43:
46:1a:bc:f5:69:e0:7f:43:2a:1c:a2:99:6b:fe:af:ca:72:1c:
c8:73:b0:88:67:77:09:63:43:ef:59:c9:b1:7e:ae:ce:28:a1:
73:fc:f3:88:ad:af:62:a7:a9:c3:c5:b9:1d:c9:a2:eb:4f:52:
4e:5f:54:92:11:57:97:a9:22:a9:cf:5c:7a:3b:01:31:3f:c4:
fe:3a:13:22:76:cb:0b:83:24:98:54:52:9a:f2:cb:38:f4:fd:
82:55:43:0c:2c:72:c1:80:09:11:46:59:b9:04:25:fb:4e:c2:
15:48:3f:c7:ff:52:c3:d4:82:18:6b:9b:52:c6:7b:70:c2:b3:
26:38:46:34:db:bb:7f:c1:47:19:d9:24:96:b8:bd:e9:11:9f:
2c:c9:73:e2:48:34:30:f0:25:ed:e8:99:5c:06:2b:92:30:97:
7d:60:a0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:13:54 2026 by rpki-client